Group Policy is a feature of the Microsoft Windows NT family of operating systems that control the working environment of user accounts and computer accounts.

learn more… | top users | synonyms (2)

4
votes
0answers
127 views

How to make computer (or user) trust signed software

I have an application, which I sign and timestamp using a code-signing certificate issued by thawte, with intermediate authority Thawte code signing CA - G2. The signature is OK (as it shows in file ...
3
votes
0answers
8k views

Cannot remove folder redirection

I enabled folder redirection for a single account to test it out and see how I liked working with it on a day-to-day basis. After some testing, I realized it won't work in my environment and thus ...
2
votes
0answers
361 views

How to enable CredSSP

I am trying to use the -Authentication CredSSP switch when entering with PowerShell (2.0) in order to remotely launch a Script that can write to files or set up new PSDrives. I get an error when I ...
2
votes
0answers
590 views

When I try to use secpol.msc (Group Policy) I get an error

When I try to use secpol.msc (Group Policy) I get an error: Failed to open group policy object on this computer. You may not have appropriate rights. I am an admin and I tried running it as ...
2
votes
0answers
263 views

Change local time on XP box - local admin but group policy restricts time change

I am a developer in need of doing some temporal unit testing on my local XP box. I am local admin but there is a group policy enforced centrally that prohibits changing local time (a severe case of ...
1
vote
0answers
20 views

Local group policy editor: Out of date version?

I've been trying to use gpedit.msc recently but I haven't been having much success. Sometimes the policy editor freezes when I press "apply" (the policy does still apply though), and I can't seem to ...
1
vote
0answers
30 views

How to enable program execution blocked by domain group policy

How can i enable program execution from any path in local computer using regedit when it's blocked by domain policy? I managed to remove policy restrictions from registry but this one escaped.
1
vote
0answers
14 views

DisableCAD local security policy on standalone Windows 7 machine reverts to Enable after reboot or logging out

I have been struggling for days trying to resolve this issue. We are required to have our users press ctrl+alt+delete to login to our systems. The local security policy has the "Interactive logon: Do ...
1
vote
0answers
30 views

What will break if I move my Domain Controller machine accounts from the default OU into another OU, assuming the policy is linked?

Background: I've been helping out with a recent G.P. simplification (read overhaul) at work. I'm working from a list of things my supervisor has requested be done with Group Policy to harden our ...
1
vote
0answers
52 views

Applying a local group policy to another user with different username and computer name

A while ago, I setup a dedicated Windows 7 Pro workstation with local group policy applied to a specific guest account. After completion, I made a backup of the applied local group policy setting at ...
1
vote
0answers
47 views

Microsoft support document with odd instructions: applying local policies to all users except administrators

I'd like to use the group policy editor to apply restrictions to all user accounts except that of the administrator on a Windows XP computer. In Windows Vista and up, this is easy to do as you're ...
1
vote
0answers
712 views

How to automatically download exe files in Internet Explorer 11?

In IE 11 and before downloading files there's the annoying bar (as seen here under Internet Explorer 9 & 10). I've been trying to disable it for a while... I tried enabling in gpedit.msc Turn off ...
1
vote
0answers
107 views

I want to be able to have a daily task run showing the times users log on and off

GOAL: I want to be able to have a daily task run showing the times users log on and off ENVIRONMENT: Windows 2008R2 domain ACTIONS SO FAR: I have enabled Account Auditing via: start -> ...
1
vote
0answers
2k views

Windows 7 Gpupdate failed

I tried to run gpupdate on a local machine but I keep getting the failed error message I have tried following Remove from domain and re-add it again Check the dns setting all correct (Even release ...
1
vote
0answers
44 views

Can I add ADMX files via symbolic links?

Is it possible to add Group Policy templates (ADMX files) on a local Windows 7 machine by creating a symbolic link (soft link) in the C:\Windows\PolicyDefinitions folder that points to an ADMX file ...
1
vote
0answers
501 views

Windows Network Bridge Connections Greyed Out

I can bridge the connection under administrator account. I have disabled the prohibit installation and configuration of Network Bridge on your DNS domain network Group Policy setting. The option to ...
1
vote
0answers
305 views

Restrict admin shares

My users need local admin rights but I'd like to restrict the admin shares (c$) to domain admins only. I was reading about adding nt authority\interactive to the local administrator group, but i don't ...
1
vote
0answers
608 views

Windows 7 Group Policy blocking Adobe Reader

A few weeks ago, my company blocked Adobe Reader due to an unpatched security issue. However, we recently moved one of our computers to a project that didn't require access to the corporate network, ...
1
vote
0answers
219 views

Group Policy no longer applying desktop wallpaper

I used to have my wallpapers updated monthly by Group Policy. Several months ago I was prompted (I think just after logon) to grant GPO (I think) access to a wallpaper setting in the registry. It was ...
1
vote
0answers
570 views

Bat file to change group policy

Based on the answer to this question: Windows XP: is it possible to log startup and shutdown times in the system event log? I want to be able to add it to a batch file, but have no idea how to go ...
1
vote
0answers
804 views

Modify 30 second wait period when RDP'ing to computer with user already logged in

In Windows 7, when remotely connecting to a workstation that already has a user logged in, it prompts the local user that someone is trying to connect and offers them 30 seconds to deny access. I ...
1
vote
0answers
165 views

Want to clean Group Policy from my machine (Vista 64) before I update to Windows 7

On my way home from a visit to Virginia, I purchased a machine from Best Buy (a couple years ago). I didn't want them to put all the sales crap on the machine and it was the only one Dell left with a ...
1
vote
0answers
323 views

Refresh rate being reset to outside monitor native resolution?

I have a 25-unit computer lab that are hooked up to Dell Optiplex 960s. It seems that every time the computer goes into standby, or is left alone for long enough, it resets the refresh rate to 85 ...
1
vote
0answers
281 views

Cannot connect to WiFi networks after installing Asus ATK drivers

I have installed ATKACPI driver and hotkey-related utilities. I cannot connect to WiFi networks after that (Windows doesn't show available networks), if I'm logged in as a non-administrative user. It ...
1
vote
0answers
1k views

How to disable “Open File Security Warning” using GPOs?

I have a domain controller (Server 2008 R2) running on my home network. I want to use a group policy on my Server 2008 box to disable the "Open File - Security Warning" prompt when running EXE files, ...
0
votes
0answers
8 views

Apply A Security Group To An OU Via Group Policy

I'm having trouble trying to work out if this is possible: What I want to do is have an Active Directory OU, with a group policy applied to it so that if a computer is moved into the OU it becomes a ...
0
votes
0answers
11 views

Restricting user access to certain features via registry on Windows 8.1 Home Premium

I need to restrict user access to Control Panel for example. And because its Home Premium version of Windows it doesn't have Group Policy Manager. Im using this list to do those restrictions. First ...
0
votes
0answers
10 views

Can't get symbolic link creation permissions to work under windows

I am trying to grant my user the privileges to create symbolic links. I ran secpol.msc and navigated to Local policies -> User rights assignment -> Create symbolic links. I have added my user's ...
0
votes
0answers
11 views

How to turn off monitors after period of activity using Group Policy? (SBS 2003)

I am attempting to set our organization's workstation monitors to be turned off after a set period of time, via Group Policy. Could someone guide me through how this can be achieved with SBS 2003?
0
votes
0answers
14 views

Group policy WMI Logon Server

I'm trying to setup a GP to do tasks if in a certain location, I believe the best way in doing this is a WMI filter. Could someone help me out? I've never used this part of GP before. Was looking ...
0
votes
0answers
12 views

How to Apply GPupdate instantly on client PCs Server 2008?

How to apply gpupdate instantly on all PCs connected to server 2008 at once without going to each of them and running the gpupdate in each...?
0
votes
0answers
27 views

Cannot enable Notification Area in Windows 7

In 64-bit Windows 7, I cannot enable the notification area in the taskbar at all. Every time I try to customize the notification and system icon settings, it says "Some settings are managed by your ...
0
votes
0answers
18 views

Prohibit Windows users from creating open shares with anonymous login/access

Is there a way (using GPO or registry key) to block a windows users when they attempts to create an open share which allow anonymous login/access ? thank you.
0
votes
0answers
14 views

Group Policy Modeling Error on Server 2012 R2

I am getting the following error when I try to run the Group Policy Modeling tool (which is a part of the GPMC.mmc) on Windows Server 2012 R2. The Domain Controller for this Forrest is the machine ...
0
votes
0answers
10 views

Deploying Sofware via GPO - Install for Machines Added to Network

Is there someway in Active Directory when deploying software via Computer Settings (Assigned) to have an application be installed to computers after they are joined to the domain? I am currently ...
0
votes
0answers
29 views

Outlook 2010 “Show this folder as an e-mail address book” via GPO

In Outlook2010, I need to set the checker "Show this folder as an e-mail address book" on my clients Windows 7 boxes. I need to do this over and over because I am copying a public folder to the ...
0
votes
0answers
33 views

Active Directory domain and group policies

I'm trying to make a user group that basically have the same rights as a "User" (as oppsed to an "Administrator") with some specificities and some privileges borrowed from the "Administrators" group. ...
0
votes
0answers
5 views

Group policy to map drobo share with generic username and password

I have a Drobo 5N that I have set up for the raw video/data for our Marketing dept. I have it set up and everything works fine as far as functionality. The problem lies my group policy mapping. The ...
0
votes
0answers
35 views

Password policy restrictions Windows server 2012 - How to override / bypass

OK, this is probably a duplicate, but I'm stumped. I have to install a utility a client demands we have to transfer data (Signiant). The installer demands that there be an account with identical ...
0
votes
0answers
38 views

Bitlocker to-go group-policy conflict

I want to activate bitlocker for my SD-card but when i try, following error message appears: "The group policy settings for bitlocker startup options are in conflict and can therfore not be applied. ...
0
votes
0answers
12 views

AD-DS: IE policy to open links either in new window or new tab

Is it possible to apply a AD-DS policy to force the opening of clicked links either in a new window or in a new tab instead of the current tab in the current window? I know the user could simply ...
0
votes
0answers
25 views

Active Directory control screen saver based on user's email address

I want a particular screensaver for users on my AD, with primary email address as @abc.com and a different screen saver for users with email address as @xyz.com? How can I achieve this easily? We ...
0
votes
0answers
61 views

Users own mapped network drives disappear when I set a GPP mapped drive

All the clients use Windows 7 SP1 x64 Enterprise. The domain controllers are Windows Server 2008 R2. I have configured the GPP to map "\server\data" to first available drive letter starting with I:. ...
0
votes
0answers
133 views

Set chrome's “Ask where to save each file before downloading” setting via group policy

I am deploying chrome throughout our domain via group policy. I want to require that all file downloads ask where to save the file. There is a setting in chrome to "Ask where to save each file ...
0
votes
0answers
11 views

Automate removal of Audit Policy settings

I have a large number of files in the System32 directory that have audit policy settings that were configured directly as well as other audit policy settings that were inherited. I need to remove all ...
0
votes
0answers
20 views

Pushing down a file to each Window user's home directory

have a question on how to push down a file into each window user's home directory. I am not a Windows expert. I believe this can be done using the GPO. Can you provide some examples on how to do this? ...
0
votes
0answers
34 views

User can still run programs that are disallowed by group policy (on one computer)

On one computer, a user can run programs that have been disallowed by group policy. I have check rsop and it shows that setting as enabled and those programs are to be blocked. The user has the same ...
0
votes
0answers
22 views

Cannot add a local user to GPO

I'm trying to update the members of the Administrators (built-in) group under User Configuration > Preferences > Control Panel Settings > Local Users and Groups I'm able to successfully add domain ...
0
votes
0answers
122 views

Force update to Windows 8.1 via Group Policy or similar

I have around 30 computers running Windows 8, some have been updated to 8.1 and others not depending on whether the user has decided to accept the annoying reminder or not. Is it possible to force ...
0
votes
0answers
68 views

How to prevent everyone from adding local admins using GPO

I want to prevent everyone, including local administrators, from adding users to the Administrators group. How can I do this using GPO?